6-25
Catalyst 2960 Switch SoftwareConfiguration Guide
78-16881-01
Chapter6 Administering the Swi tch
Managing the MAC Address Table
For example, if you enter the mac address-table static mac-addr vlan vlan-id interface
interface-id global configuration command followed by the mac address-table static mac-addr
vlan vlan-id drop command, the switch drops packets with the specified MAC address as a source
or destination.
If you enter the mac address-table static mac-addr vlan vlan-id drop global configuration
command followed by the mac address-table static mac-addr vlan vlan-id interface interface-id
command, the switch adds the MAC address as a static address.
You enable unicast MAC address filtering and configure the switch to drop packets with a specific
address by specifying the source or destination unicast MAC address and the VLAN from which it is
received.
Beginning in privileged EXEC mode, follow these steps to configure the switch to drop a source or
destination unicast static address:
To disable unicast MAC address filtering, use the no mac address-table static mac-addr vlan vlan-id
global configuration command.
This example shows how to enable unicast MAC address filtering and to configure the switch to drop
packets that have a source or destination address of c2f3.220a.12f4. When a packet is received in
VLAN 4 with this MAC address as its source or destination, the packet is dropped:
Switch(config)# mac address-table static c2f3.220a.12f4 vlan 4 drop
Displaying Address Table Entries
You can display the MAC address table by using one or more of the privileged EXEC commands
described in Tabl e 6-4:
Command Purpose
Step1 configure terminal Enter global configuration mode.
Step2 mac address-table static mac-addr
vlan vlan-id drop
Enable unicast MAC address filtering and configure the switch to drop a
packet with the specified source or destination unicast static address.
•For mac-addr, specify a source or destination unicast MAC address.
Packets with this MAC address are dropped.
•For vlan-id, specify the VLAN for which the packet with the
specified MAC address is received. Valid VLAN IDs are 1 to 4094.
Step3 end Return to privileged EXEC mode.
Step4 show mac address-table static Verify your entries.
Step5 copy running-config startup-config (Optional) Save your entries in the configuration file.
Table6-4 Commands for Displaying the MAC Address Table
Command Description
show ip igmp snooping groups Displays the Layer 2 multicast entries for all VLANs or the specified VLAN.
show mac address-table address Displays MAC address table information for the specified MAC address.
show mac address-table aging-time Displays the aging time in all VLANs or the specified VLAN.
show mac address-table count Displays the number of addresses present in all VLANs or the specified VLAN.